Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZyzeFWjrD7UbspgR4FMVZH8xo7s.roa
File:                     ZyzeFWjrD7UbspgR4FMVZH8xo7s.roa (raw, json)
Hash identifier:          p6x9+15Or4cnbcAn07Z5QU4c4heBBKS9LeM4WwMyccs=
Subject key identifier:   67:2C:DE:15:68:EB:0F:B5:1B:B2:98:11:E0:53:15:64:7F:31:A3:BB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B64
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZyzeFWjrD7UbspgR4FMVZH8xo7s.roa
Signing time:             Wed 29 Sep 2021 02:46:33 +0000
ROA not before:           Wed 29 Sep 2021 02:46:33 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7012 (0x1b64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:33 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=672CDE1568EB0FB51BB29811E05315647F31A3BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:d2:e5:75:fd:59:ec:23:55:3b:8c:b3:f2:
                    66:32:1e:d5:75:01:65:56:60:75:1b:f9:ea:cf:6a:
                    fd:be:c1:1d:d1:d5:4b:5f:f6:09:94:42:87:2e:27:
                    51:ab:68:53:3f:7b:af:ca:f8:30:d7:c1:22:2b:b1:
                    1c:31:64:a2:54:31:db:a4:fa:4f:cd:d8:3e:8e:f3:
                    f6:dd:ed:e0:64:2e:0a:b2:d0:18:73:9f:fc:51:c6:
                    2f:a1:13:69:07:28:89:db:77:73:44:4f:7c:d2:de:
                    c9:9b:97:5b:00:bc:94:ef:02:f7:b9:12:3a:3d:6d:
                    2c:7d:f6:68:b1:a7:29:2d:dd:25:9b:5b:ec:18:30:
                    6c:3a:8f:dd:42:36:8d:c6:34:c0:f3:52:b1:ab:ea:
                    00:6f:8c:bd:57:b9:42:ce:46:ef:6b:ed:db:d3:c0:
                    21:e3:b4:0b:8a:2d:c2:49:7f:f3:a7:88:b0:6f:c8:
                    3a:00:80:a3:d2:5b:8b:1e:a1:da:c5:bc:d7:35:cd:
                    0f:7b:e1:65:92:e3:53:1b:0e:ca:d1:e2:7a:5b:a4:
                    65:94:bd:c2:01:33:52:19:21:c3:99:9e:f9:86:e0:
                    d4:ba:28:84:82:c0:86:65:9e:3a:9c:c2:4c:a0:72:
                    93:04:93:a4:07:86:60:69:29:d1:6e:93:e0:71:fc:
                    8e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2C:DE:15:68:EB:0F:B5:1B:B2:98:11:E0:53:15:64:7F:31:A3:BB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZyzeFWjrD7UbspgR4FMVZH8xo7s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:46:3f:e5:14:84:15:d9:c0:25:6e:33:4c:d2:0b:27:e8:58:
         a3:0e:6a:fb:0d:c9:a1:19:2c:77:5b:1b:41:1a:36:a6:94:53:
         3a:0b:0c:5e:51:2b:ee:f8:24:01:59:4e:d9:b6:85:25:2e:6b:
         ea:30:24:92:c6:85:b5:6d:a1:4e:7f:c8:9e:0e:ec:91:07:e6:
         b9:c8:69:c1:e9:34:dd:fb:8c:6b:df:ce:62:49:6a:d1:70:bc:
         f2:ee:17:88:d6:e4:ba:01:b4:ba:2d:ae:89:31:e9:55:e2:d7:
         72:89:94:b7:35:98:00:71:47:b1:73:64:c2:5a:7c:2b:0e:53:
         0c:d0:b1:62:71:5c:1f:f0:4d:37:cb:46:48:2b:06:c7:e3:40:
         2a:19:18:89:56:cb:42:80:8d:2d:98:a4:b6:36:c6:79:9a:bd:
         df:c7:43:d8:16:e7:3a:6c:ec:d4:1c:89:5f:97:4e:34:e3:3e:
         03:1f:d4:e7:4e:11:81:7b:c7:9d:48:ff:96:6b:16:0f:2e:06:
         8c:e6:5e:7f:c0:3b:85:a1:37:a5:95:fd:1c:44:b8:8f:6c:7a:
         08:44:1d:54:26:86:04:e5:e5:f3:7f:aa:dd:9e:1e:87:64:7f:
         47:06:fb:ff:00:41:f3:97:6a:28:15:dd:cb:52:e2:dd:a0:1e:
         3f:31:48:1d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG2QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2MzNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDY3MkNERTE1NjhFQjBG
QjUxQkIyOTgxMUUwNTMxNTY0N0YzMUEzQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPZdLldf1Z7CNVO4yz8mYyHtV1AWVWYHUb+erPav2+wR3R1Utf
9gmUQocuJ1GraFM/e6/K+DDXwSIrsRwxZKJUMduk+k/N2D6O8/bd7eBkLgqy0Bhz
n/xRxi+hE2kHKInbd3NET3zS3smbl1sAvJTvAve5Ejo9bSx99mixpykt3SWbW+wY
MGw6j91CNo3GNMDzUrGr6gBvjL1XuULORu9r7dvTwCHjtAuKLcJJf/OniLBvyDoA
gKPSW4seodrFvNc1zQ974WWS41MbDsrR4npbpGWUvcIBM1IZIcOZnvmG4NS6KISC
wIZlnjqcwkygcpMEk6QHhmBpKdFuk+Bx/I4jAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZyzeFWjrD7UbspgR4FMVZH8xo7swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1p5emVGV2pyRDdVYnNwZ1I0
Rk1WWkg4eG83cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wwAwDQYJKoZIhvcNAQELBQADggEBAJdGP+UUhBXZwCVuM0zSCyfoWKMOavsNyaEZ
LHdbG0EaNqaUUzoLDF5RK+74JAFZTtm2hSUua+owJJLGhbVtoU5/yJ4O7JEH5rnI
acHpNN37jGvfzmJJatFwvPLuF4jW5LoBtLotrokx6VXi13KJlLc1mABxR7FzZMJa
fCsOUwzQsWJxXB/wTTfLRkgrBsfjQCoZGIlWy0KAjS2YpLY2xnmavd/HQ9gW5zps
7NQciV+XTjTjPgMf1OdOEYF7x51I/5ZrFg8uBozmXn/AO4WhN6WV/RxEuI9seghE
HVQmhgTl5fN/qt2eHodkf0cG+/8AQfOXaigV3ctS4t2gHj8xSB0=
-----END CERTIFICATE-----